CVE-2021-38707

Persistent cross-site scripting XSS vulnerabilities in ClinicCases 7.3.3 allow low-privileged attackers to introduce arbitrary JavaScript to account parameters. The XSS payloads will execute in the browser of any user who views the relevant content. This can result in account takeover via session...

CVE-2021-38707

Persistent cross-site scripting XSS vulnerabilities in ClinicCases 7.3.3 allow low-privileged attackers to introduce arbitrary JavaScript to account parameters. The XSS payloads will execute in the browser of any user who views the relevant content. This can result in account takeover via session...

CVE-2021-38704

Multiple reflected cross-site scripting XSS vulnerabilities in ClinicCases 7.3.3 allow unauthenticated attackers to introduce arbitrary JavaScript by crafting a malicious URL. This can result in account takeover via session token theft...

CVE-2021-38704

Multiple reflected cross-site scripting XSS vulnerabilities in ClinicCases 7.3.3 allow unauthenticated attackers to introduce arbitrary JavaScript by crafting a malicious URL. This can result in account takeover via session token theft...

Cross site scripting

Multiple reflected cross-site scripting XSS vulnerabilities in ClinicCases 7.3.3 allow unauthenticated attackers to introduce arbitrary JavaScript by crafting a malicious URL. This can result in account takeover via session token theft...

Cross site scripting

Persistent cross-site scripting XSS vulnerabilities in ClinicCases 7.3.3 allow low-privileged attackers to introduce arbitrary JavaScript to account parameters. The XSS payloads will execute in the browser of any user who views the relevant content. This can result in account takeover via session...

CVE-2021-38704

Multiple reflected cross-site scripting XSS vulnerabilities in ClinicCases 7.3.3 allow unauthenticated attackers to introduce arbitrary JavaScript by crafting a malicious URL. This can result in account takeover via session token theft...

CVE-2021-38704

Multiple reflected cross-site scripting XSS vulnerabilities in ClinicCases 7.3.3 allow unauthenticated attackers to introduce arbitrary JavaScript by crafting a malicious URL. This can result in account takeover via session token theft...

CVE-2021-38704

ClinicCases 7.3.3 is vulnerable to multiple reflected XSS vulnerabilities that allow unauthenticated attackers to inject arbitrary JavaScript via a crafted URL, potentially leading to account takeover through session token theft. Affected product: ClinicCases 7.3.3. Root cause: insufficient input...

CVE-2021-38707

Persistent cross-site scripting XSS vulnerabilities in ClinicCases 7.3.3 allow low-privileged attackers to introduce arbitrary JavaScript to account parameters. The XSS payloads will execute in the browser of any user who views the relevant content. This can result in account takeover via session...

CVE-2021-38707

Persistent cross-site scripting XSS vulnerabilities in ClinicCases 7.3.3 allow low-privileged attackers to introduce arbitrary JavaScript to account parameters. The XSS payloads will execute in the browser of any user who views the relevant content. This can result in account takeover via session...

PT-2021-10409

Name of the Vulnerable Software and Affected Versions: ICVO version 1.0 Description: A lack of target address verification in the selfdestructs function allows attackers to steal tokens from victim users via a crafted script. Recommendations: For version 1.0, consider disabling the selfdestructs...

CVE-2020-19767: Undefined Security Weakness

A lack of target address verification in the destroycontract function of 0xRACER 1.0 allows attackers to steal tokens from victim users via a crafted script...

0xRACER 输入验证错误漏洞

0xRACER is a new team-based pool lottery game. 0xRACER is vulnerable to an input validation error stemming from a lack of target address validation in the destroycontract function of 0xRACER version 1.0, which could be exploited by an attacker to steal a token from a victim user via a carefully...

Rob The Bank 数据伪造问题漏洞

Rob The Bank is a music website. Rob The Bank suffers from a data forgery issue vulnerability that stems from the lack of destination address validation in the BurnMe function in Rob The Bank version 1.0, which allows an attacker to steal tokens from victimized users via a carefully crafted scrip...

PT-2021-10410

Name of the Vulnerable Software and Affected Versions: Rob The Bank version 1.0 Description: The issue is related to a lack of target address verification in the BurnMe function, which allows attackers to steal tokens from victim users via a crafted script. Recommendations: For Rob The Bank versi...

CVE-2020-19768: Insufficient Verification of Data Authenticity

A lack of target address verification in the selfdestructs function of ICOVO 1.0 allows attackers to steal tokens from victim users via a crafted script...

CVE-2020-19769: Insufficient Verification of Data Authenticity

A lack of target address verification in the BurnMe function of Rob The Bank 1.0 allows attackers to steal tokens from victim users via a crafted script...

PT-2021-10408

Name of the Vulnerable Software and Affected Versions: 0xRACER version 1.0 Description: A lack of target address verification in the destroycontract function allows attackers to steal tokens from victim users via a crafted script. This issue enables attackers to exploit the lack of verification,...

PT-2021-22265

Name of the Vulnerable Software and Affected Versions ClinicCases version 7.3.3 Description The issue allows unauthenticated attackers to introduce arbitrary JavaScript by crafting a malicious URL, resulting in account takeover via session token theft. This is due to multiple reflected cross-site...